Method and apparatus for authenticating components

• US 7,512,795 B2
• Filed: 01/04/2005
• Issued: 03/31/2009
• Est. Priority Date: 01/04/2005
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Puhl, Larry C., Rabe, Duane C., Buskey, Ronald F.
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Armouche; Hadi
• Application Number:
  US11/028,872
• Publication Number:
  US 20060149966A1
• Time in Patent Office: 1,547 Days
• Field of Search: 713/168, 713/150, 713/153, 713171-173, 713189-193, 380/255, 380259-262, 726 26- 30, 726 34- 35
• US Class Current: 713/168
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality

Abstract

A method and apparatus authenticates a component (450) for use in a device (100). The device memory (122) stores a predetermined challenge and a predetermined response (212) associated with the predetermined challenge. The method detects whether the component has been coupled to the device. If the component has been detected (206), the predetermined challenge is provided to the component (208). If a component response is received within a predetermined response time (210), it is compared to the predetermined response. The component is disabled (214) if either the component response is not received within the predetermined response time or the component response is received within the predetermined response time but the component response is not equivalent to the predetermined response. The component is enabled (216) if the component response is received within the predetermined response time and the component response is equivalent to the predetermined response.

Claims

1. A method for authenticating a component for use with a device having a predetermined challenge and a predetermined response associated with the predetermined challenge stored in the device, the method comprising the steps of:

detecting whether the component has been coupled to the device;

if the component has been detected, providing the predetermined challenge to the component;

the component receiving the predetermined challenge;

generating a component response in response to secret information stored in the component and a one-way cryptographic function, the secret information being generated through processing a first seed of a plurality of seeds through the one-way cryptographic function to derive a first result, then processing the first result added to a second seed of the plurality of seeds through the one-way cryptographic function to derive a second result, then processing the second result added to a third seed of the plurality of seeds through the one-way cryptographic function to derive the secret information;

providing the component response to the device;

determining whether the component response has been received from the component within a predetermined response time;

if the component response is received within the predetermined response time, comparing the component response to the predetermined response;

disabling the component in response to one of the component response not being received within the predetermined response time and the component response not being equivalent to the predetermined response; and

enabling the component if the component response is received within the predetermined response time and the component response is equivalent to the predetermined response.

2. The method of claim 1 wherein the predetermined function is a one-way cryptographic function.

3. The method of claim 2 wherein the one-way cryptographic function is a hard-wired implementation of the one-way cryptographic function having a predetermined processing time less than the predetermined response time.

4. The method of claim 3 wherein the predetermined response time is less than a processing time of a microprocessor implementation of the one-way cryptographic function.

5. The method of claim 1 wherein the step of generating the component response comprises the step of generating the component response in response to the predetermined challenge, the secret information stored in the component and the predetermined function.

6. The method of claim 5 wherein the predetermined function is a one-way cryptographic function and wherein the step of generating the component response comprises the step of generating the component response by processing the predetermined challenge and the secret information through the one-way cryptographic function.

7. The method of claim 1 wherein the step of detecting whether the component has been coupled to the device comprises the step of detecting whether the component is coupled to the device when the device is powered up.

8. The method of claim 7 wherein the device includes a user output device and wherein the step of disabling the component comprises the steps of:

powering up the device;

providing a message to a user of the device for a predetermined message time through the user output device, wherein the message indicates to the user that the component is an unauthorized component; and

powering down the device.

9. The method of claim 1 wherein the device has a plurality of predetermined responses associated with the predetermined challenge stored therein and wherein the step of comparing the component response to the predetermined response comprises the step of comparing the component response to each of the plurality of predetermined responses, and wherein the step of disabling the component comprises the step of disabling the component in response to one of the component response not being received within the predetermined response time and the component response not being equivalent to any of the plurality of predetermined responses, and wherein the step of enabling the component comprises the step of enabling the component if the component response is received within the predetermined response time and the component response is equivalent to one of the plurality of predetermined responses.

10. A device comprising:

a component coupler for electrically and physically coupling a component to the device;

a memory for storing at least one predetermined challenge and at least one associated predetermined response generated in response to the at least one predetermined challenge and secret information, the secret information generated by processing a first seed of a plurality of seeds through a one-way cryptographic function to derive a first result, then processing the first result added to a second seed of the plurality of seeds through the one-way cryptographic function to derive a second result, then processing the second result added to a third seed of the plurality of seeds through the one-way cryptographic function to derive the secret information;

a clock for generating a clock signal;

a controller coupled to the component coupler and the memory for detecting whether the component has been coupled to the device, and, if the component has been detected, providing one of the at least one predetermined challenge to the component, the controller further coupled to the component coupler and the clock for determining in response to the clock signal whether a component response has been received from the component within a predetermined response time, wherein the controller further compares the component response to the at least one associated predetermined response if the component response is received within the predetermined response time, and wherein the controller generates a device disabling signal in response to one of the component response not being received within the predetermined response time and the component response not being equivalent to the at least one associated predetermined response; and

a device disabler coupled to the controller for disabling the device in response to the device disabling signal.

11. The device of claim 10 further comprising user inputs for receiving operational inputs including a power on input from a user and for generating a user signal in response thereto, and wherein the component coupler generates a component signal in response to a component being coupled thereto, the controller coupled to the user inputs and the component coupler for detecting a component in response to the user signal and the component signal.

12. The device of claim 10 further comprising a user output device coupled to the controller for providing a predetermined unauthorized component message to a user in response to the device disabling signal, and wherein the controller provides the device disabling signal to the user output device for a predetermined message time and then provides the device disabling signal to the device disabler.

13. A component for physically and electrically coupling to a device, the component comprising:

a challenge receiver for coupling to the device and receiving one of a plurality of predetermined challenges from the device;

a component memory for storing secret information therein, the secret information being generated by processing a first seed of a plurality of seeds through a one-way cryptographic function to derive a first result, then processing the first result added to a second seed of the plurality of seeds through the one-way cryptographic function to derive a second result, then processing the second result added to a third seed of the plurality of seeds through the one-way cryptographic function to derive the secret information;

a component response generator coupled to the challenge receiver and the component memory for generating a component response by processing one of the plurality of predetermined challenges and the secret information through a one-way cryptographic function; and

a response provider for coupling to the device and providing the component response thereto.

14. The component of claim 13 wherein the one-way cryptographic function is a hard-wired implementation of the one-way cryptographic function having a predetermined processing time.

15. The component of claim 13 wherein the component is a battery further comprising a power storage apparatus for providing power to the component and to the device.

16. A portable electronic device comprising:

a battery coupler for electrically and physically coupling a battery to the device;

a nonvolatile memory for storing a plurality of predetermined challenges and a plurality of associated predetermined responses, and at least one of the plurality of associated predetermined responses generated in response to one of the plurality of predetermined challenges and secret information, the secret information generated by processing a first seed of a plurality of seeds through a one-way cryptographic function to derive a first result, then processing the first result added to a second seed of the plurality of seeds through the one-way cryptographic function to derive a second result, then processing the second result added to a third seed of the plurality of seeds through the one-way cryptographic function to derive the secret information;

a clock for generating a clock signal;

a controller coupled to the battery coupler and the nonvolatile memory for detecting whether the battery has been coupled to the device, and, if the battery has been detected, providing one of the plurality of predetermined challenges to the battery, the controller further coupled to the battery coupler and the clock for determining in response to the clock signal whether a component response has been received from the battery within a predetermined response time, wherein the controller further compares the component response to the plurality of associated predetermined responses if the component response is received within the predetermined response time, and wherein the controller generates a device disabling signal in response to one of the component response not being received within the predetermined response time and the component response not being equivalent to at least one of the plurality of associated predetermined responses; and

a device disabler coupled to the controller for disabling the portable electronic device in response to the device disabling signal.

17. The portable electronic device of claim 16 further comprising user inputs for receiving operational inputs including a power on input from a user and for generating a user signal in response thereto, and wherein the battery coupler generates a battery coupled signal in response to a battery being coupled thereto, the controller coupled to the user inputs and the battery coupler for detecting a battery in response to the user signal and the battery coupled signal.

18. The portable electronic device of claim 16 further comprising a display coupled to the controller for providing a predetermined unauthorized battery message to a user in response to the device disabling signal, and wherein the controller provides the device disabling signal to the display for a predetermined message time and then provides the device disabling signal to the device disabler.